CVE-2026-9051CWE-306

Authentication Bypass Vulnerability in NI SystemLink Enterprise

Critical · published May 29, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypass authentication controls leading to privilege escalation or information disclosure.  Successful exploitation requires an attacker to send a specially crafted HTTP request.  This vulnerability affects NI SystemLink Enterprise 2026-04 and prior versions.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00781 · 55.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-05-29T18:04Z
EPSS history
Timeline
  • 29 MAY 18:04Z
    Authentication Bypass Vulnerability in NI SystemLink Enterprise
    cvelistv5